Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfef79fe4cc0540007d2171b8a7b3812235abc5a.cer
File:                     cfef79fe4cc0540007d2171b8a7b3812235abc5a.cer (raw, json)
Hash identifier:          M2GjnZTcWZpLqRxiSmvy1gKEXeigRvLKNYyWWZvIcEw=
Subject key identifier:   4C:60:CB:84:A1:E6:FE:30:44:55:20:53:9B:D3:94:23:9E:0C:10:43
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4E021
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e3ee3fa5-bb70-4479-a7c4-8b96372e3aa9/cfef79fe4cc0540007d2171b8a7b3812235abc5a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e3ee3fa5-bb70-4479-a7c4-8b96372e3aa9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Apr 2023 15:50:22 +0000
Certificate not after:    Sat 24 Aug 2024 15:00:00 +0000
Subordinate resources:    AS: 2146
                          IP: 200.9.32.0/19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14999585 (0xe4e021)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 11 15:50:22 2023 GMT
            Not After : Aug 24 15:00:00 2024 GMT
        Subject: CN=cfef79fe4cc0540007d2171b8a7b3812235abc5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a7:f0:38:e9:e9:ad:df:6b:34:b9:a6:c9:ca:
                    0f:dd:ff:fb:8d:7e:f2:94:88:fa:aa:b2:76:cd:a0:
                    04:9f:04:1f:86:b1:59:5c:44:07:c4:3e:49:cb:e6:
                    b5:89:d8:4e:3a:a1:53:08:ab:67:f2:a4:b4:68:3e:
                    5a:c9:af:68:87:9d:df:5f:c3:52:a4:cb:89:e9:ec:
                    61:7e:e8:e6:e5:20:c6:9e:79:dd:5e:1d:41:68:c7:
                    e3:e6:99:75:ff:0c:a7:53:d0:71:5f:68:bb:59:d1:
                    ba:b7:95:98:0b:41:78:f9:f6:3e:20:55:70:56:76:
                    4c:f3:95:13:8e:64:12:66:21:41:c8:29:0b:a3:65:
                    ef:4d:f1:ac:c2:36:f2:7d:50:0c:82:06:23:41:ea:
                    df:4d:a6:62:77:6b:8f:3b:a8:38:23:e4:60:f3:50:
                    1a:c8:ad:e9:fb:12:94:5a:89:e1:17:ae:fe:0a:93:
                    6c:df:73:15:73:0e:ec:4e:ba:20:53:47:7d:38:15:
                    ba:c0:a2:72:4b:cc:1e:c4:73:ca:5d:5e:3d:2f:65:
                    16:4d:03:09:78:d0:ce:28:7a:92:5e:f6:40:91:5f:
                    4c:5e:88:6f:c0:24:f1:1f:b3:54:42:1f:fa:dd:21:
                    73:93:48:3a:b9:ef:7b:21:b6:1e:13:38:7c:ac:ee:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:60:CB:84:A1:E6:FE:30:44:55:20:53:9B:D3:94:23:9E:0C:10:43
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e3ee3fa5-bb70-4479-a7c4-8b96372e3aa9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e3ee3fa5-bb70-4479-a7c4-8b96372e3aa9/cfef79fe4cc0540007d2171b8a7b3812235abc5a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.32.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2146

    Signature Algorithm: sha256WithRSAEncryption
         bc:a3:e7:4a:c7:f1:a2:a2:55:82:53:81:85:05:fc:eb:35:9a:
         95:19:2d:0c:03:a4:7b:24:81:32:c0:38:02:c9:ab:80:81:3a:
         95:48:4d:6c:ce:59:62:06:8b:b2:ff:b0:76:38:dc:c3:f8:03:
         03:13:11:b9:c6:8f:26:16:00:1e:a3:22:0d:e7:8c:17:ea:04:
         aa:82:f3:f6:92:df:c0:7d:66:e4:94:dc:b6:a9:86:02:23:59:
         02:a9:0f:4f:05:14:d7:7d:6a:df:f3:88:73:ac:43:d7:ab:09:
         1e:03:b9:f4:f5:dd:8f:dc:e8:1f:05:db:d4:2b:05:38:f7:84:
         e3:f6:6a:b8:a9:c1:01:cf:e4:f3:fa:23:4a:4d:fb:f5:5e:51:
         a1:22:28:26:09:37:ce:a0:be:c5:52:d8:da:1a:48:6b:6d:e8:
         8c:f6:f9:4c:91:62:b0:49:74:f1:35:15:50:1c:65:a3:0e:0b:
         89:4b:d8:03:01:48:21:0f:57:0b:e6:d8:c9:fe:ee:3e:6b:54:
         86:c7:fc:fd:a9:a5:a9:53:51:49:30:ff:4f:2c:39:04:fc:4d:
         31:5b:cb:34:b7:02:77:b3:e3:12:57:9a:64:a0:7b:f3:b0:3c:
         9a:e1:29:6d:59:24:af:b9:01:63:82:f1:5c:a5:16:d9:38:f1:
         a4:db:f9:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----